Two Russian state-sponsored groups have been found to be working together.

Two Russian state-sponsored hacking groups, Turla and Gamaredon, have been observed working together in cyberattacks against Ukrainian targets between February and April 2025. ESET researchers found that Gamaredon’s tools were used to deploy and restart Turla’s Kazuar espionage implant on compromised systems. This collaboration suggests a strategic targeting of high-value Ukrainian systems. Both groups are linked to different divisions of Russia’s FSB intelligence agency.

Read more:

https://www.securityweek.com/turla-and-gamaredon-working-together-in-fresh-ukrainian-intrusions/